Browse CVEs

HIGH 8.8 CVE-2025-34334 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in t… Fax Server after 2.6.23 Fix from $1,9502025-11-19 HIGH 8.8 CVE-2025-34335 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability i… Fax Server 2.6.23+ Fix from $1,9502025-11-19 HIGH 7.8 CVE-2025-34332 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back… Fax Server after 2.6.23 Fix from $1,9502025-11-19 HIGH 7.8 CVE-2025-34333 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with… Fax Server after 2.6.23 Fix from $1,9502025-11-19 CRITICAL 9.8 CVE-2025-34328 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that ex… Fax Server after 2.6.23 Fix from $2,3002025-11-19 CRITICAL 9.8 CVE-2025-34329 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at Audio… Fax Server after 2.6.23 Fix from $2,3002025-11-19 HIGH 7.5 CVE-2025-34331 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via th… Fax Server after 2.6.23 Fix from $1,9502025-11-19 MEDIUM 5.3 CVE-2025-34330 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that ex… Fax Server after 2.6.23 Fix from $1,6002025-11-19 CRITICAL 9.8 CVE-2025-32106 In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's ability to execut… Mp 112 Firmware after 6.60A.369.002 Fix from $2,3002025-06-03 HIGH 7.5 CVE-2024-52881 An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to the use of a hard-coded key, an attacker is able to d… One Voice Operations Center 8.4.582+ Fix from $1,9502025-02-07 HIGH 7.5 CVE-2024-52883 An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to a path traversal vulnerability, sensitive data can be… One Voice Operations Center 8.4.582+ Fix from $1,9502025-02-07 HIGH 7.5 CVE-2024-52884 An issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501.841. Due to the use of weak password obfuscation/encry… Mediant Session Border Controller 7.40a.501.841+ Fix from $1,9502025-02-07 MEDIUM 6.1 CVE-2024-52882 An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to improper neutralization of input via the devices API,… One Voice Operations Center 8.4.582+ Fix from $1,6002025-02-07 HIGH 7.8 CVE-2023-22955 An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple checksum checks … 445hd Firmware after 3.4.4.1000 Fix from $1,9502023-08-11 HIGH 7.5 CVE-2023-22956 An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to d… C470hd Firmware after 3.4.4.1000 Fix from $1,9502023-08-11 HIGH 7.5 CVE-2023-22957 An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attack… C470hd Firmware after 3.4.4.1000 Fix from $1,9502023-08-11 CRITICAL 9.8 CVE-2022-24627EPSS 26% An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of th… Device Manager Express after 7.8.20002.47752 Fix from $2,3002023-05-29 CRITICAL 9.8 CVE-2022-24629EPSS 37% An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal i… Device Manager Express after 7.8.20002.47752 Fix from $2,3002023-05-29 HIGH 7.2 CVE-2022-24628 An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhon… Device Manager Express after 7.8.20002.47752 Fix from $1,9502023-05-29 HIGH 7.2 CVE-2022-24630EPSS 24% An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_comm… Device Manager Express after 7.8.20002.47752 Fix from $1,9502023-05-29 MEDIUM 5.4 CVE-2022-24631EPSS 43% An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenants.php desc parameter. Device Manager Express after 7.8.20002.47752 Fix from $1,6002023-05-29 MEDIUM 5.3 CVE-2022-24632EPSS 27% An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during file download via the BrowseFi… Device Manager Express after 7.8.20002.47752 Fix from $1,6002023-05-29 HIGH 8.8 CVE-2019-9229 An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An i… Median 500l Msbr Firmware Mitigation only Fix from $1,9502019-07-20 HIGH 7.5 CVE-2019-9228 An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.2… Median 500l Msbr Firmware Mitigation only Fix from $1,9502019-07-19 HIGH 8.8 CVE-2019-9231 An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cr… Mediant 500l Msbr Firmware Mitigation only Fix from $1,9502019-07-18 MEDIUM 6.1 CVE-2019-9230 An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cr… Mediant 500l Msbr Firmware Mitigation only Fix from $1,6002019-07-18 HIGH 8.8 CVE-2018-16219 A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same netwo… 405hd Firmware No fix yet Fix from $1,9502019-04-25 HIGH 8.0 CVE-2018-16216 A command injection (missing input validation, escaping) in the monitoring or memory status web interface in AudioCodes 405HD (firmware 2.2.12) VoIP … 405hd Firmware No fix yet Fix from $1,9502019-04-25 MEDIUM 6.1 CVE-2018-16220 Cross Site Scripting in different input fields (domain field and personal settings) in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an att… 405hd Firmware Mitigation only Fix from $1,6002019-04-25 HIGH 8.8 CVE-2018-5757EPSS 8% An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a paramet… 420hd Ip Phone Firmware No fix yet Fix from $1,9502019-04-01